URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://es.sempra-infra.splunkcloud.com/en-US/app/SplunkEnterpriseSecuritySuite/search?q=search%20index%3Dglobal_proofpoint%20sender%3Dfacturacion%40grupocodesi.com.mx&earliest=1715497860&latest=1715526660&display.page.search.mode=verbose&dispatch.sample_ratio=1&display.page.search.tab=events&display.general.type=events&sid=1715546452.1529444#
Resource
win10v2004-20240508-en
General
-
Target
https://es.sempra-infra.splunkcloud.com/en-US/app/SplunkEnterpriseSecuritySuite/search?q=search%20index%3Dglobal_proofpoint%20sender%3Dfacturacion%40grupocodesi.com.mx&earliest=1715497860&latest=1715526660&display.page.search.mode=verbose&dispatch.sample_ratio=1&display.page.search.tab=events&display.general.type=events&sid=1715546452.1529444#
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: searchindex=global_proofpointsender=facturacion@grupocodesi.com.mx